Staff Software Engineer
HealthEquity, Inc.1 day ago
Remote, United StatesStaff+
Base Salary
$144k - $238k/yr
Responsibilities
- Own technical decisions and lead design across authentication, authorization, session management, and OIDC, OAuth2, and SAML flows.
- Build end-to-end identity services for passkey registration and sign-in, step-up and out-of-band verification, identity verification, and member-platform APIs.
- Own customer identity journeys from design through production telemetry, including document, selfie, phone-risk, device, behavioral, and bank-account signals.
- Define secure credential handling, token lifecycle, session lifecycle, and security controls in partnership with Information Security and Compliance.
- Extend authentication for employers, brokers, agents, and partners, including corporate-email and phone factors and administrative tooling.
- Build the identity layer for the next-generation mobile application, including token exchange, sessions, device trust, GraphQL, and REST endpoints.
- Evaluate and implement an open-source CIAM stack, retire legacy federation, and design credential migration paths.
- Triage SCA and SAST findings, remediate dependency and base-image vulnerabilities, protect PII in logs, and prevent security regressions.
- Author and maintain AI-agent skills and workflows for code review, testing, secure implementation, and remediation.
- Instrument production systems with dashboards, alerts, and queries, and maintain architecture notes, runbooks, and knowledge-base documentation.
Requirements
- At least seven years of software engineering experience, including at least three years working on authentication, identity, or security-sensitive production systems.
- Deep hands-on knowledge of OIDC, OAuth2, SAML, FIDO2, and WebAuthn, including failure modes and attacks.
- Strong TypeScript and Node.js experience, including NestJS, plus working C# and .NET experience.
- Experience with at least one customer identity platform at scale, such as Transmit Security, Ory, Ping, Duende IdentityServer, Auth0, or Okta.
- Experience with cloud-native delivery on Azure or an equivalent, including Kubernetes, Helm, API gateways, key vaults, managed identities, and self-written CI/CD pipelines.
- Comfort designing GraphQL and REST APIs, working with SQL and Postgres, and integrating event-driven systems.
- Daily fluency with AI-assisted development tools and hands-on experience building or orchestrating AI agents in development.
- Security engineering experience with threat modeling, secure defaults, dependency hygiene, and explaining vulnerabilities and fixes to non-engineers.
- Clear written communication and the ability to work with product, fraud operations, member services, and vendors across time zones.
- Preferred experience includes identity verification and fraud integrations, mobile authentication, regulated healthcare or financial industries, HIPAA or PCI, Dynatrace, Databricks, and credential or user migrations without downtime.
Benefits
- Medical, dental, and vision benefits.
- HSA contribution and match and dependent care FSA match.
- Uncapped paid time off and paid parental leave.
- 401(k) match, financial literacy programs, education and tuition assistance, gym and fitness reimbursement, and wellness incentives.
- US-remote work arrangement with occasional travel to Draper, Utah.
- Required onsite onboarding through the quarterly Trailhead program, with travel and accommodations covered; onboarding may begin virtually.
- Performance-based incentives and restricted stock units are available in addition to benefits.
Tech Stack
About HealthEquity, Inc.
HealthEquity builds a platform for administering Health Savings Accounts and other consumer-directed benefits (FSA, HRA, COBRA, commuter) for employers, advisors, and health plans. It earns fees for account administration and payments and custodial interest on HSA cash, and provides cards, portals, and integrations for members and partners. Founded in 2002 and headquartered in Draper, Utah, the public company trades on NASDAQ as HQY and serves over 16 million members.